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IN THE CLAIMS: 

1 1 . (CURRENTLY AMENDED) A method for efficiently searching a hash table contain- 

2 ing a plurality of ranges, the method comprising: 

3 performing one or more preliminary range checks on at least one target value, 

4 each preliminary range check generating an output value having a value dependent on 

5 whether the target value is included in a predefined range of values associated with the 

6 preliminary range check; 

7 combining signature information with the output values generated by the prelimi- 

8 nary range checks to generate a modified signature; 

9 applying a predetermined function to the modified signature to derive an index 

10 that references a hash-table entry in the hash table; 

1 1 locating a searchable data structure associated with the hash-table entry refer- 

12 enced by the index, the searchable data structure comprising one or more search nodes, at 

13 least one of the search nodes configured to store one or more target-value ranges associ- 

14 ated with the target value; aed- 

15 searching the search nodes in the searchable data structure until a matching search 

16 node is found whose stored target-value ranges associated with the target value include 
n the target value ; and 

is providing information associated with the matching search noder 



1 2. (ORIGINAL) The method of claim 1, wherein the searchable data structure is a linked 

2 list and the search nodes in the searchable data structure are linked-list entries. 

1 3. (ORIGINAL) The method of claim 1, wherein the output values generated by the pre- 

2 liminary range checks are concatenated with the signature information to generate the 

3 modified signature. 
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1 4. (ORIGINAL) The method of claim 1, wherein the step of searching the search nodes in 

2 the searchable data structure further comprises: 

3 searching the search nodes until a matching search node is found that not only 

4 stores target- value ranges including their associated target values, but also stores the sig- 

5 nature information. 

1 5. (ORIGINAL) The method of claim 4, wherein the signature information and the target 

2 value are obtained from predetermined fields in a packet's network headers or from other 

3 packet-related information. 

1 6. (CURRENTLY AMENDED) The method of claim 5, wherein the information associ- 

2 ated with the matching search node is data-flow information and the method further com- 

3 prisesing: 

4 extracting the data-flow information from the matching search node, the data-flow 

5 information being used to route the packet. 

1 7. (ORIGINAL) The method of claim 1 , wherein the step of applying a predetermined 

2 function to the modified signature generates one or more output bits, and a predetermined 

3 set of the output bits are masked to derive the index. 

1 8. (CURRENTLY AMENDED) An intermediate network node configured to perform 

2 flow-based processing, the intermediate network node comprising: 



3 a network interface for receiving a data packet; 

4 a memory adapted configured to store a hash table organized as a plurality of in- 

5 dexed hash-table entries, each hash-table entry associated with a corresponding linked list 

6 and each linked list containing one or more linked-list entries; and 

7 a system controller configured to efficiently search the hash table, the system con- 



troller configured to : 
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9 obtaining signature information and at least one target value from a 

10 set of predetermined fields in the received packet's network headers; 

11 performing one or more preliminary range checks on at least one 

12 of the target values, each preliminary range check generating an output 

13 value having a value dependent on whether the target value is included in 

14 a predefined range of values associated with the preliminary range check; 

15 combineing the signature information with the output values gen- 

16 erated by the preliminary range checks to generate a modified signature; 
n applying a predetermined function to the modified signature to de- 
is rive an index that references a hash-table entry in the hash table; 

19 locateing a linked list associated with the hash-table entry refer- 

20 enced by the index, the linked list comprising one or more linked-list en- 

21 tries, each entry configured to store at least one target-value range associ- 

22 ated with the target value; and 

23 searching linked-list entries in the linked list until a matching 

24 linked-list entry is found whose stored target-value ranges associated with 

25 the target value include the target value ; and 

26 provide information associated with the matching linked-list entry . 

1 9. (CURRENTLY AMENDED) The intermediate network node of claim 8, further com- 

2 prising a processor, 

3 wherein the memory is further adapt e d configured to store instructions for execu- 



4 tion by the processor, at least a portion of the instructions defining a router operating sys- 

5 tern configured to route the received packet based on a data flow associated with the re- 

6 ceived packet. 

1 10. (CURRENTLY AMENDED) The intermediate network node of claim 9, wherein the 

2 information associated with the linked-list entry is data-flow information and the system 

3 controller identifies the data-flow information stored in the matching linked-list entry and 
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4 transfers the data-flow information to the router operating system which routes the re- 

5 ceived packet in accordance with the data-flow information. 

1 11. (ORIGINAL) The intermediate network node of claim 8, wherein the system control- 

2 ler searches the linked-list entries until a matching linked-list entry is found that not only 

3 stores target-value ranges including their associated target values, but also stores the sig- 

4 nature information. 

1 12. (CURRENTLY AMENDED) The intermediate network node of claim 1 1 , further 

2 comprising a processor, 

3 wherein the memory is further adapted configured t o store instructions for execu- 

4 tion by the processor, at least a portion of the instructions defining a router operating sys- 

5 tern configured to route the received packet based on a data flow associated with the re- 

6 ceived packet. 

1 13. (CURRENTLY AMENDED) The intermediate network node of claim 1 2, wherein 

2 the information associated with the linked-list entry is data-flow information and the svs- 

3 tern controller identifies the data-flow information stored in the matching linked-list entry 

4 and transfers the data-flow information to the router operating system which routes the 

5 received packet in accordance with the data-flow information. 

1 14. (CURRENTLY AMENDED) An apparatus for efficiently searching a hash table con- 

2 taining a plurality of ranges, the method comprising: 

3 means for performing one or more preliminary range checks on at least one target 

4 value, each preliminary range check generating an output value having a value dependent 

5 on whether the target value is included in a predefined range of values associated with the 

6 preliminary range check; 

7 means for combining signature information with the output values generated by 

8 the preliminary range checks to generate a modified signature; 
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9 means for applying a predetermined function to the modified signature to derive 

10 an index that references a hash-table entry in the hash table; 

n means for locating a searchable data structure associated with the hash-table entry 

12 referenced by the index, the searchable data structure comprising one or more search 

13 nodes, at least one of the search nodes configured to store one or more target-value 

14 ranges associated with the target value; and 

15 means for searching the search nodes in the searchable data structure until a 

16 matching search node is found whose stored target- value ranges associated with the target 
l? value include the target value, and 

l means for providing information associated with the matching search node. 



1 15. (ORIGINAL) The apparatus of claim 14, wherein the searchable data structure is a 

2 linked list and the search nodes in the searchable data structure are linked-list entries. 

1 16. (ORIGINAL) The apparatus of claim 14, wherein the output values generated by the 

2 preliminary range checks are concatenated with the signature information to generate the 

3 modified signature. 

1 17. (ORIGINAL) The apparatus of claim 14, further comprising: 

2 means for searching the search nodes in the searchable data structure until a 

3 matching search node is found that stores target-value ranges including their associated 

4 target values and also stores the signature information. 

1 18. (ORIGINAL) The apparatus of claim 17, wherein the signature information and the 

2 target values are obtained from predetermined fields in a packet's network headers or 

3 from other packet-related information. 
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1 19. (CURRENTLY AMENDED) The apparatus of claim 1 8, wherein the information 

2 associated with the matching search node is data-flow information and the apparatus fur- 

3 ther comprisesmg: 

4 means for extracting the data-flow information from the matching search node, 

5 the data-flow information being used to route the packet. 

1 20. (ORIGINAL) The apparatus of claim 14, wherein the means for applying a predeter- 

2 mined function to the modified signature generates one or more output bits and a prede- 

3 termined set of the output bits are masked to derive the index. 



1 21 . (CURRENTLY AMENDED) A computer-readable media including instructions for 

2 execution by a processor, the instructions for a m e thod of efficiently searching a hash ta- 

3 ble comprising a plurality of ranges, the m e thod comprising instructions when executed 

4 operable to : 

5 perfoimejftg-one or more preliminary range checks on at least one target value, 

6 each preliminary range check generating an output value having a value dependent on 

7 whether the target value is included in a predefined range of values associated with the 

8 preliminary range check; 

9 combine_mg-signature information with the output values generated by the pre- 

10 liminary range checks to generate a modified signature; 

1 1 applyjng-a predetermined function to the modified signature to derive an index 

12 that references a hash-table entry in the hash table; 

13 locateing-a searchable data structure associated with the hash-table entry refer- 

14 enced by the index, the searchable data structure comprising one or more search nodes, at 

15 least one of the search nodes configured to store one or more target- value ranges associ- 

16 ated with the target value; m4 

17 search jtng-the search nodes in the searchable data structure until a matching 

is search node is found whose stored target-value ranges associated with the target value 

19 include the target value ; and 
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20 



provide information associated with the matching search node . 



